Home
QNX Software Development Platform
QNX SDP is a cross-compiling and debugging environment, including an IDE and command-line tools, for building binary images and programs for target boards running QNX Neutrino 7.1.
System Security Guide
The QNX System Security Guide is intended for both system integrators who are responsible for the security of a QNX Neutrino RTOS system and developers who want to create a QNX Neutrino resource manager free from vulnerabilities.
Security Policies
The libsecpol API (secpol.h)
The libsecpol library API provides functions for systems that use security policies.

QNX Momentics IDE User's Guide
This User's Guide describes version 7.1 of the Integrated Development Environment (IDE) that's part of the QNX Momentics tool suite.
QNX Software Development Platform
QNX SDP is a cross-compiling and debugging environment, including an IDE and command-line tools, for building binary images and programs for target boards running QNX Neutrino 7.1.
- Quickstart Guide
- OS Components & Operations
- Audio & Graphics API
- Multimedia
- Networking Middleware
- Programming
- Sensor Framework
- System Security Guide
  The QNX System Security Guide is intended for both system integrators who are responsible for the security of a QNX Neutrino RTOS system and developers who want to create a QNX Neutrino resource manager free from vulnerabilities.
  - Security Matrix
    The following table describes security problems and cyberattacks and the QNX Neutrino security features that can mitigate them.
  - Security Features Overview
  - Security Features for Developers
  - Security Features for System Integrators
  - Security Policies
    - Using security policies
    - Security policy language
    - Named range file
    - Tutorial: Build a system that uses a security policy
      The steps for developing a QNX Neutrino system that uses a security policy include adding security types and generating a policy using the secpolgenerate utility.
    - The libsecpol API (secpol.h)
      The libsecpol library API provides functions for systems that use security policies.
      - Specifying the security policy file handle
        For convenience, the API functions that specify a handle to the security policy file allow you to specify NULL for handle.
      - Checking custom permissions when no policy is used
      - Customizing permissions using a security policy
        The secpol_get_permission() and secpol_check_permission() functions allow you to support fine-grained permission checking in a system that uses security policies.
      - secpol_check_permission()
        Check if a requesting process has a specified permission
      - secpol_close()
        Close the security policy file
      - secpol_flags_e
        Flags for secpol_transition_type(), secpol_posix_spawnattr_settypeid() and secpol_resolve_name()
      - secpol_get_permission()
        Returns a handle to a permission associated with a custom class
      - secpol_get_permission_flags_e
        Flags for secpol_get_permission()
      - secpol_get_policy_id()
        Return the policy id of any policy that has been pushed to procnto
      - secpol_get_type_id()
        Return the type ID associated with a type name
      - secpol_get_type_name()
        Return the type name associated with a type ID
      - secpol_open()
        Open a security policy file
      - secpol_open_flags_e
        Flags for secpol_open()
      - secpol_posix_spawnattr_settypeid()
        Update a spawn attribute object to spawn a child with a different type
      - secpol_resolve_name()
        Resolve a type name to a type ID
      - secpol_transition_type()
        Transition to a new type
      - secpol_type_id()
        Return the type ID of the process
  - Fortified System Functions
  - QNX Cryptography Library
    The QNX cryptography library (qcrypto library) is a generic cryptographic shim layer that provides a consistent API to the various cryptographic primitives offered by third-party libraries.
  - The devcrypto service
    The devcrypto service is a legacy system driver interface and is mainly provided for backwards compatibility.
  - Pathtrust
    The pathtrust feature prevents processes from executing untrusted code. If a process is compromised, pathtrust mitigates the threat of the system being further compromised by an attacker using chained-together exploits.
  - PAM
    Systems that need authentication can use pluggable authentication module (PAM), a configurable standard library.
  - Using mkqnximage to Display Security Features
- Utilities & Libraries
QNX Hypervisor
The QNX Hypervisor allows you to run multiple OSs on a target system so you can separate critical and non-critical functions, support a wide variety of applications, and reduce hardware costs.
QNX Software in the Cloud
QNX Software in the Cloud enables developers to use the QNX software in Amazon Web Services (AWS) and Microsoft Azure (Azure).
QNX Advanced Virtualization Frameworks User's Guide
This User's Guide is aimed at all systems integrators and developers who want to design and build embedded systems using the QNX Advanced Virtualization Frameworks.
Typographical Conventions, Support, and Licensing
This section describes the typographical conventions used throughout the documentation and explains how to obtain technical support.

The libsecpol API (secpol.h)

The libsecpol library API provides functions for systems that use security policies.

You can use the libsecpol functions to perform the following tasks:

Easily reduce privileges after initialization.
Spawn child processes with reduced privileges.
Perform fine-grained permission checking.
Translate type names to type IDs and vice versa.

You can easily design a program that uses libsecpol to work both with and without security policies.

Page updated: March 12, 2026